Re: [PATCH] efi: Add iMac Pro 2017 to uefi skip cert quirk

From: Mimi Zohar
Date: Tue Nov 01 2022 - 07:58:09 EST


Hi Aditya,

On Thu, 2022-10-27 at 10:01 +0000, Aditya Garg wrote:
> From: Aditya Garg <gargaditya08@xxxxxxxx>
>
> The iMac Pro 2017 is also a T2 Mac. Thus add it to the list of uefi skip cert.
>
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Aditya Garg <gargaditya08@xxxxxxxx>

I found this list of computers with the Apple T2 Security Chip -
https://support.apple.com/en-us/HT208862, but not a list that
correlates them to the system ID. With this update, is this the entire
list?

thanks,

Mimi

> ---
> security/integrity/platform_certs/load_uefi.c | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/security/integrity/platform_certs/load_uefi.c b/security/integrity/platform_certs/load_uefi.c
> index b78753d27d8ea6..d1fdd113450a63 100644
> --- a/security/integrity/platform_certs/load_uefi.c
> +++ b/security/integrity/platform_certs/load_uefi.c
> @@ -35,6 +35,7 @@ static const struct dmi_system_id uefi_skip_cert[] = {
> { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "MacPro7,1") },
> { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMac20,1") },
> { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMac20,2") },
> + { UEFI_QUIRK_SKIP_CERT("Apple Inc.", "iMacPro1,1") },
> { }
> };
>